Last updated: 09 November 2026 

​

Neurish is committed to creating a safe, low‑stim, neurodivergent‑affirming space. We collect as little data as possible and only what is needed to run the platform securely. 

​

Neurish is based in Scotland and complies with UK GDPR, the Data Protection Act 2018, and all relevant UK privacy laws.

 

1. Who we are 

ExploreBuddy Ltd (trading as Neurish) 

Registered in Scotland 

Email: contact@explorebuddy.co.uk 

We are the “data controller” for your personal data. 

​

2. What data we collect 

We collect only the minimum data needed to operate the platform safely: 

Account data 

• Email address 

• Password (encrypted - we never see it) 

• Basic profile information (e.g., display name, interests, date of birth, photos - profile and posts, IP addresses - the last 10 for safety purposes and bans, children's information - age, interest and sensitivites) 

• Push Notification Tokens 

​

Usage data 

• App interactions (e.g., joining groups, sending messages) 

• Device type and app version 

• Crash logs and performance data (via Firebase) 

​

Payment data (if you subscribe) 

Handled securely by Stripe and RevenueCat. 

We never store your full card details. 

​

Optional data you choose to share 

• Profile bio 

• Interests for matching 

• Group participation 

• Messages (stored securely and only for service delivery) 

​

We do NOT collect: 

• Medical information 

• Diagnostic details 

• Sensitive personal data unless you voluntarily share it 

• Location is optional. If you turn on Location Sharing we store your coordinates to suggest people nearby. Turning it off clears them.

• Advertising identifiers for targeted ads 

​

3. How we use your data 

We use your data to: 

• Create and manage your account 

• Match you with people who share your interests 

• Provide safe group spaces 

• Improve app performance 

• Process subscriptions and payments 

• Keep the platform safe and prevent misuse 

We do not sell your data. 

We do not use your data for behavioural advertising. 

​

4. Our legal basis for processing 

Under UK GDPR, we rely on: 

• Contract - to provide the Neurish service 

• Consent - for optional features 

• Legitimate interests - to keep the platform safe and functioning 

• Legal obligation - if required to comply with law enforcement or safeguarding duties 

​

5. Who we share data with 

We only share data with trusted processors who help us run the platform: 

Firebase (Google Cloud) 

• Database

• File storage 

• Notifications 

• Authentication

• Crash reporting 

• Analytics (minimal, non‑intrusive) 

​

Netlify (hosts the app's server) and UI Avatars (ui-avatars.com, which receives a chat partner's first name to draw an initials picture)

​

All processors comply with UK GDPR and use secure, encrypted systems. 

We do not share your data with advertisers, charities, or partners. 

​

6. Data storage and security 

Your data is stored securely using: 

• Encrypted databases 

• Access controls 

• Regular security reviews 

• Industry‑standard cloud infrastructure 

​

We retain data only for as long as necessary to provide the service. 

​

7. Data retention 

• Account data: kept while your account is active 

• Messages: stored only for service delivery 

• Deleted accounts: removed within 30 days 

• Payment records: retained as required by UK financial law 

• Reports, moderation logs and IP bans are kept after an account is deleted, to keep the platform safe.

​

8. Data Processing for Moderation 

Moderation actions may involve processing user content for the purpose of maintaining platform safety. 

​

9. Your rights under UK GDPR 

You can: 

• Access your data 

• Correct inaccurate data 

• Request deletion 

• Withdraw consent 

• Object to processing 

• Request a copy of your data 

​

ExploreBuddy Ltd has appointed a Data Protection Officer (DPO) who can be contacted at dpo@explorebuddy.co.uk. 

​

10. Children’s privacy 

Neurish is designed for adults 18+. 

Children cannot hold accounts. A parent or guardian may add their child's age, interests and sensitivities to find supportive communities. ExploreBuddy Ltd (Neurish) does not knowingly hold accounts for those under 16. 

​

11. International transfers 

Some processors (e.g., Firebase, Stripe) may store data outside the UK. 

They use approved safeguards such as Standard Contractual Clauses. 

​

12. Cookies 

Our website uses essential cookies only. 

We do not use tracking or advertising cookies. 

​

13. Changes to this policy 

We may update this policy to reflect changes in law or platform features. 

We will notify users of significant updates. 

​

14. Contact us 

If you have questions or concerns: 

contact@explorebuddy.co.uk 

 

This Policy is governed by the laws of Scotland. Any disputes will be handled by the Scottish courts.